Policy & Drama

Grok Build leaks confidential user data

Ars Technica: Grok Build coding agent leaks oodles of confidential info, some belonging to SpaceXSI

Grok Build, the vibe-coding agent from SpaceXSI, is leaking data—some of it proprietary business information and other sensitive secrets—from thousands of its users, including the very same Elon Musk-owned company that offers the platform, new research shows. The information is revealed through links allowing Grok Build users to share their apps with others. Grok takes steps to randomize the URLs so only people who know the exact URL can access the data stored there. A design decision by develop

Get smart on it

Grok Build, a coding agent platform, has been leaking confidential data from thousands of user applications through a flaw in how it generates shareable links. The platform uses randomized phrases in the left portion of URLs to obscure access, but this design allows the links to be easily discovered through passive DNS services that monitor public domain lookups, making nearly 95 percent of over 35,000 Grok Build apps accessible to anyone who finds the correct link. The exposed data includes internal business plans, medical records, employee rosters, and military contractor information from various organizations, as well as proprietary materials from SpaceXSI itself, the company that created the platform. The vulnerability stems from a fundamental design choice: placing randomness to the left of the domain name rather than to the right, as other platforms like Google use, which would have kept the links invisible to DNS searches.

The biggest AI stories, once a day

One short email a day with the stories that matter. Free. Unsubscribe with one click.

Relevant courses

Want to go deeper than the news? Explore live, cohort-based AI courses taught by practitioners.

Browse AI courses on Maven
Related news
Policy & DramaOpen story →

Nvidia is reportedly preparing to fire Jensen Huang

Nvidia's board is preparing to dismiss CEO Jensen Huang following a report from the New York Times about a second alleged extramarital affair, just days after he admitted to a separate affair with a woman alleged to be a Chinese spy, The Wall Street Journal reports. The second alleged affair was with an executive who reports to him, Nvidia's vice president of health care, Kimberly Powell, according to the Times, saying the two may have been captured on video "being affectionate

Also reported by TechCrunch

Policy & DramaOpen story →

The unfolding Jensen Huang scandal: a timeline

The affair could have ramifications for national security as the U.S. and China race to develop the most advanced AI infrastructure.

Policy & DramaOpen story →

Jensen Huang accused of having another affair, with an Nvidia exec

Jensen Huang, who has come under fire for admitting to an affair with a woman accused of being a Chinese intelligence agent, has been accused of having a separate affair with an Nvidia subordinate.

Policy & DramaOpen story →

Congress to call Jensen Huang in to answer for alleged Chinese spy affair

Nvidia CEO Jensen Huang has until the end of the day Wednesday to answer a call from House Republicans for a closed-door briefing on his affair with alleged Chinese spy.

Policy & DramaOpen story →

Nvidia is investigating Jensen Huang’s relationship with a Chinese spy

Nvidia has announced that it is opening an investigation into CEO Jensen Huang and his relationship with Megaspeed executive Alice Huang, who was reportedly recruited by China's Ministry of State Security to spy on the company. A statement posted by the board of directors reads: The NVIDIA Board is initiating an independent investigation in light of recent reporting that founder and CEO Jensen Huang has been the target of a foreign intelligence effort. A committee of independe

Also reported by TechCrunch, Wired AI and Data Center Knowledge

Policy & DramaOpen story →

A 13-Year-Old Asked AI About Suicide on Her School Laptop. It Didn’t Get Flagged for Weeks

The young girl’s parents allege that she used Gemini via her school Chromebook to plan her suicide, but the school’s monitoring systems didn’t know until it was almost too late.